Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4616D51854E111F19F38EC09CF1D38B0.roa
File: 4616D51854E111F19F38EC09CF1D38B0.roa (raw, json)
Hash identifier: oa9rKDQRKY0kTsd0JdtoGRHnijbP8REtCDGeTLmf5qM=
Subject key identifier: 23:36:AF:FC:39:1F:5D:43:6A:71:F8:0B:69:F0:A3:22:34:18:AA:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4616D51854E111F19F38EC09CF1D38B0.roa
Signing time: Thu 21 May 2026 06:49:55 +0000
ROA not before: Thu 21 May 2026 06:49:50 +0000
ROA not after: Sun 20 May 2029 06:49:50 +0000
asID: 17561
IP address blocks: 154.194.228.0/24 maxlen: 24
154.194.229.0/24 maxlen: 24
154.194.230.0/24 maxlen: 24
154.194.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118074 (0x1cd3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 06:49:50 2026 GMT
Not After : May 20 06:49:50 2029 GMT
Subject: CN=6a0eab13-107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:cb:62:92:6e:5a:a9:94:1b:6e:1a:0d:08:
e2:db:4c:06:49:03:54:46:83:3a:70:14:8a:f1:c8:
d4:6b:57:0c:9a:09:1e:a3:4f:96:80:8c:1d:d0:5d:
49:cc:f3:e2:05:f0:ec:e3:dc:63:4c:76:5e:bc:53:
4e:13:77:36:d2:c7:c5:35:2e:51:47:87:1b:fe:ef:
3b:20:f7:32:90:ec:60:20:d6:b2:38:a4:7e:9c:78:
4b:fc:3f:d2:41:7f:52:09:fc:e3:20:bc:94:47:87:
60:1b:b5:4c:9a:76:05:60:37:8c:a7:cc:03:c3:c7:
fa:96:25:30:ec:fe:a0:85:ee:05:4f:a2:dd:95:c2:
57:2e:09:3e:96:76:71:70:c5:fd:74:ab:86:0b:0c:
5c:99:0d:07:b5:0b:1c:10:26:0d:de:28:d8:0f:a3:
57:c7:a7:90:e5:1d:64:18:61:10:4b:59:45:1e:e0:
2a:94:92:f3:19:91:9e:ab:fc:ab:d7:25:33:d5:3b:
b0:c5:90:f8:89:2f:83:c8:04:51:5a:26:02:d9:31:
b9:75:03:79:91:f5:5d:fc:2d:ab:18:d9:5b:d2:19:
06:f7:c0:52:0e:cc:41:18:3b:27:b2:8c:a6:83:99:
38:1d:2e:2e:c7:33:59:c8:c8:24:50:2d:47:bb:3d:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:36:AF:FC:39:1F:5D:43:6A:71:F8:0B:69:F0:A3:22:34:18:AA:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4616D51854E111F19F38EC09CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.228.0/22
Signature Algorithm: sha256WithRSAEncryption
85:94:bd:e1:1e:fc:d0:9e:70:c9:71:59:0d:16:42:e7:ae:4b:
e1:d3:b6:ce:c5:58:69:df:4a:9b:00:c5:47:93:d3:a0:ed:df:
84:69:6d:65:a9:60:ea:7b:48:de:dd:c3:aa:f4:1e:54:dd:1a:
4b:16:97:9e:24:95:df:e0:78:fe:73:b8:ef:02:88:94:c0:84:
f5:d0:e5:d3:e4:0b:9a:03:83:d1:6a:60:7f:71:39:29:85:48:
40:cd:97:74:f1:a0:9f:8d:7d:4a:d3:3c:9c:10:83:81:26:c7:
6d:5a:1b:c7:db:3d:4e:67:f1:20:39:c1:21:ed:99:64:03:35:
fb:4b:b4:7a:aa:9c:7f:b2:3c:f6:16:9f:6f:cc:35:39:bc:32:
e2:98:d8:a2:b7:2b:f9:fd:27:70:65:cc:f9:ef:cf:a3:81:3a:
01:74:da:b9:92:89:b5:e8:bc:a6:3e:5d:a1:bb:83:c0:c1:f0:
c5:93:b0:3b:4e:2a:d8:97:6f:ad:cc:63:9a:1a:70:66:62:66:
c4:9f:8d:67:7b:50:a7:86:25:44:40:f8:51:3d:9c:f8:2f:9d:
4c:27:b0:34:cc:a1:a7:86:95:8a:05:70:93:b6:3c:0d:65:21:
b6:d1:e3:1f:ab:5c:08:3c:2d:d6:4f:1c:8d:e5:5a:0f:82:e5:
4b:4d:b7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:50 2026 by rpki-client